diff --git a/.github/workflows/incluster-comp-pr-merged.yaml b/.github/workflows/incluster-comp-pr-merged.yaml
index b8ee7e7..efd8671 100644
--- a/.github/workflows/incluster-comp-pr-merged.yaml
+++ b/.github/workflows/incluster-comp-pr-merged.yaml
@@ -124,7 +124,6 @@ jobs:
             IMAGE_TAG_PRERELEASE: ${{ steps.image-prerelease-tag.outputs.IMAGE_TAG_PRERELEASE }}
             TEST_NAMES: ${{ steps.export_tests_to_env.outputs.TEST_NAMES }}
         permissions:
-            actions: write
             id-token: write
             packages: write
             contents: read
@@ -177,8 +176,8 @@ jobs:
                   tags: ${{ inputs.IMAGE_NAME }}:${{ steps.image-prerelease-tag.outputs.IMAGE_TAG_PRERELEASE }}
                   build-args: image_version=${{ inputs.IMAGE_TAG }}
                   platforms: ${{ inputs.BUILD_PLATFORM }}
-                  cache-from: type=gha
-                  cache-to: type=gha,mode=max
+                  cache-from: type=registry,ref=${{ inputs.IMAGE_NAME }}:buildcache
+                  cache-to: type=registry,ref=${{ inputs.IMAGE_NAME }}:buildcache,mode=max
                   push: true
 
             - name: Attest image provenance